[Bug 210303] garbage in ipf(5)

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Wed Jun 15 13:03:08 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210303

            Bug ID: 210303
           Summary: garbage in ipf(5)
           Product: Documentation
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Documentation
          Assignee: freebsd-doc at FreeBSD.org
          Reporter: leventelist at gmail.com
                CC: freebsd-amd64 at FreeBSD.org
                CC: freebsd-amd64 at FreeBSD.org

There is a garbage written in ipf(5)

   TCP/UDP Port Matching
       Having specified which protocol is being matched, it is  then  possible
       to indicate which port numbers a packet must have in order to match the
       rule.  Due to port numbers being used differently to addresses,  it  is
       therefore  possible to match on them in different ways. IPFilter allows
       you to use the following logical operations:

       < x    is true if the port number is greater than or  equal  to  x  and
              less than or equal to y is true if the port number in the packet
              is less than x

and the whole port range matching simply not implemented:

       Additionally, there are a number of ways to specify a range of ports:
garbage:
       x <> y is true if the port number is less than a and greater than y

       x >< y is true if the port number is greater than x and less than y

       x:y    is true if the port number is greater than or  equal  to  x  and
              less than or equal to y

Even the example doesn't work:
       pass in proto tcp from 127.0.0.0/8 to any port = 6000:6009

It says:

syntax error error at ":", line 2

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-amd64 mailing list